Dave Lieber I was confused. Kept seeing mention of a security “key” offered on some of my favorite websites—Microsoft, Google, YouTube and Facebook, to name a few. I wasn’t sure if I should use it.

Most people assume that turning on two-factor authentication is enough to protect their accounts. It’s a big improvement. But it’s not enough. If someone can take control of your phone number, trick ...

I have all but moved on from password to passkeys, where possible, as a safer alternative to typing a long string of characters. But there's a caveat: if someone gains physical access to your computer ...